Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34309B69AFB8B3B06FF6DAB9A2DF931CAF361352AE8B800BE7C46F0BAB6740A9/0/34352e3138302e32322e302f32332d3234203d3e20323639373432.roa
File:                     34352e3138302e32322e302f32332d3234203d3e20323639373432.roa (raw, json)
Hash identifier:          TQmd07Tdevo+6J2Y35h3swdUlTbkS15ciaM6MRdELYE=
Subject key identifier:   9E:88:BC:B5:10:F3:92:63:20:C7:98:2C:BE:94:B8:78:6B:06:82:A6
Certificate issuer:       /CN=C6532B6E8DFB9C6CF073D8E4E153CAF65F174764
Certificate serial:       3C69F449306FCE0F76FD33C37B392B827832CDFD
Authority key identifier: C6:53:2B:6E:8D:FB:9C:6C:F0:73:D8:E4:E1:53:CA:F6:5F:17:47:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6532B6E8DFB9C6CF073D8E4E153CAF65F174764.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34309B69AFB8B3B06FF6DAB9A2DF931CAF361352AE8B800BE7C46F0BAB6740A9/0/34352e3138302e32322e302f32332d3234203d3e20323639373432.roa
Signing time:             Tue 04 Feb 2025 18:01:27 +0000
ROA not before:           Tue 04 Feb 2025 17:56:27 +0000
ROA not after:            Tue 03 Feb 2026 18:01:27 +0000
asID:                     269742
IP address blocks:        45.180.22.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:69:f4:49:30:6f:ce:0f:76:fd:33:c3:7b:39:2b:82:78:32:cd:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6532B6E8DFB9C6CF073D8E4E153CAF65F174764
        Validity
            Not Before: Feb  4 17:56:27 2025 GMT
            Not After : Feb  3 18:01:27 2026 GMT
        Subject: CN=9E88BCB510F3926320C7982CBE94B8786B0682A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4e:72:01:66:40:b3:5b:92:bc:2e:96:08:4d:
                    28:a7:c5:fd:14:1d:6a:aa:e8:fb:c1:dc:4c:38:a3:
                    c7:3f:4a:c4:4f:9a:27:32:e0:72:ea:72:a5:22:51:
                    cc:75:31:b3:7b:81:80:34:3e:12:8e:5e:00:ce:84:
                    56:3a:6f:91:84:e0:44:39:98:be:06:eb:d6:b9:fa:
                    12:f5:d5:c7:81:db:7e:07:33:23:07:b4:ac:b9:cc:
                    8e:1d:db:eb:1f:da:48:82:60:f1:66:05:55:1b:1e:
                    e6:af:a1:8e:09:27:7a:d0:44:9d:2a:66:dd:ac:60:
                    52:83:c2:f5:3d:39:80:35:78:a3:2e:74:cb:a5:4a:
                    01:22:2c:b2:af:00:e0:5a:ef:fd:a2:36:83:c7:b5:
                    d3:62:e7:a2:31:bb:8e:2f:ed:ee:b8:2c:4d:b7:3f:
                    bb:64:f8:76:69:6f:6e:73:3f:af:2f:5d:91:0e:ef:
                    b5:92:b7:49:79:ee:83:4f:5f:45:ca:c6:0c:58:34:
                    c9:e9:28:8a:fc:81:e5:d5:eb:7a:26:f6:b7:63:ca:
                    4d:8a:dd:1a:00:29:d3:9d:a0:0b:2d:e8:c4:36:62:
                    68:fe:fe:1c:db:44:4c:9f:0d:ea:65:41:44:61:a4:
                    60:87:d7:af:b3:5c:10:f2:1c:ea:4a:69:8c:5d:6f:
                    9c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:88:BC:B5:10:F3:92:63:20:C7:98:2C:BE:94:B8:78:6B:06:82:A6
            X509v3 Authority Key Identifier:
                keyid:C6:53:2B:6E:8D:FB:9C:6C:F0:73:D8:E4:E1:53:CA:F6:5F:17:47:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34309B69AFB8B3B06FF6DAB9A2DF931CAF361352AE8B800BE7C46F0BAB6740A9/0/C6532B6E8DFB9C6CF073D8E4E153CAF65F174764.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6532B6E8DFB9C6CF073D8E4E153CAF65F174764.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34309B69AFB8B3B06FF6DAB9A2DF931CAF361352AE8B800BE7C46F0BAB6740A9/0/34352e3138302e32322e302f32332d3234203d3e20323639373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:38:5f:00:41:48:a3:21:de:8f:44:84:9f:e1:89:c2:d5:db:
         aa:72:52:2e:5e:2e:cf:47:59:82:2e:c5:63:93:b5:b6:a7:87:
         69:c9:22:ea:94:60:b7:3f:d9:78:88:ca:ad:38:3d:5a:a0:8e:
         da:85:e3:d6:5c:03:cc:6c:f9:ef:8e:c9:fe:7f:17:23:65:7f:
         94:dc:4f:e6:9f:2a:7e:5a:b2:d0:18:0f:e0:bf:72:cc:ce:92:
         3b:07:63:9e:29:77:81:c0:1c:60:db:cb:e1:43:52:6c:96:d8:
         34:d0:84:8d:a0:25:7c:99:10:30:a6:4c:9c:8b:11:81:95:49:
         34:c2:75:f0:78:0a:c9:b9:90:d7:bf:f3:1c:6f:ab:46:59:52:
         d6:fa:8e:fb:a3:84:ed:38:88:2a:4e:22:f2:00:df:7d:9d:3b:
         82:ee:d3:58:38:18:3d:23:88:a7:bf:61:dc:b2:9b:d0:7f:e0:
         d0:46:80:8f:9d:95:3d:90:9e:94:b1:55:a9:9d:1e:82:a6:b4:
         17:08:78:06:49:a8:fc:b7:b1:de:8b:62:f7:c6:e7:69:2b:ba:
         fe:be:21:ef:e2:d6:80:10:60:77:52:d8:a4:43:b3:5d:29:54:
         1e:15:2c:d6:0d:8a:cf:1f:bf:7e:58:0c:1b:64:07:97:3d:c9:
         ac:5a:13:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:23:14 2025 by rpki-client